Sec+ Quiz - 1

An organization is migrating several SaaS applications that support SSO. The security manager wants to ensure the migration is completed securely. Which of the following should the organization consider before implementation? (Select TWO).

• The hashing method

• The encryption method

• The registration authority

• The certificate authority

• The back-end directory source

A user is attempting to navigate to a website from inside the company network using a desktop. When the user types in the URL. https://www.site.com, the user is presented with a certificate mismatch warning from the browser. The user does not receive a warning when visiting http://www.anothersite.com. Which of the following describes this attack?

• On-path

• Domain hijacking

• DNS poisoning

• Evil twin

A systems administrator is troubleshooting a server's connection to an internal web server. The administrator needs to determine the correct ports to use. Which of the following tools BEST shows which ports on the web server are in a listening state?

• Netstat

• Ping

• ssh

• Ipconfig

The Chief Information Security Officer (CISO) requested a report on potential areas of improvement following a security incident. Which of the following incident response processes is the CISO requesting?

• Lessons learned

• Preparation

• Detection

• Containment

• Root cause analysis

A security analyst was called to investigate a file received directly from a hardware manufacturer. The analyst is trying to determine whether it is modified in transit before installation on the user's computer. Which of the following can be used to safely assess the file?

• Check the hash of the installation file

• Match the file names

• Verify the URL download location

• Verify the code-signing certificate

An employee received a word processing file that was delivered as an email attachment. The subject line and email content enticed the employee to open the attachment. Which of the following attack vectors BEST matches this malware?

• Embedded Python code

• Macro-enabled file

• Bash scripting

• Credential-harvesting website

A security forensics analyst is examining a virtual server. The analyst wants to preserve the present state of the virtual server, including memory contents. Which of the following backup types should be used?

• Snapshot

• Differential

• Cloud

• Full

• Incremental

Two organizations plan to collaborate on the evaluation of new SIEM solutions for their respective companies. A combined effort from both organizations' SOC teams would speed up the effort. Which of the following can be written to document this agreement?

• MOU

• ISA

• SLA

• NDA

A cloud service provider has created an environment where customers can connect existing local networks to the cloud for additional computing resources and block internal HR applications from reaching the cloud. Which of the following cloud models is being used?

• Public

• Community

• Hybrid

• Private

A social media company based in North America is looking to expand into new global markets and needs to maintain compliance with international standards. With which of the following is the company's data protection officer MOST likely concerned?

• NIST Framework

• ISO 27001

• GDPR

• PCI-DSS